Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File:                     w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier:          H/Vtzk7kHwbXqRpysrv+ZQd/24gxo89b3MXGlpwqviY=
Subject key identifier:   FB:D3:1A:94:C0:7F:6C:29:99:79:66:17:3B:02:3C:A8:EB:04:31:72
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer:       /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial:       01962F0677339245518D18811493244573B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number:          08A9
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=)
                          2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: CdsuF3WqGEd46opkLuEGW9nrTMwfo1OMmDfh0PC7goo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:77:33:92:45:51:8d:18:81:14:93:24:45:73:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=fbd31a94c07f6c29997966173b023ca8eb043172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:48:cf:18:dd:66:bf:e1:23:a1:b9:14:f1:
                    ad:98:03:ed:1e:b2:40:c9:fa:18:7f:9e:89:e3:15:
                    87:e3:38:63:a7:46:b8:87:67:bc:f8:d5:58:ec:c5:
                    0b:14:23:9a:13:74:05:b7:5e:94:1b:e8:90:fc:08:
                    07:54:6b:91:99:34:21:6c:40:7a:9c:76:56:4b:b2:
                    92:be:93:bc:2b:03:43:91:2a:d6:b1:e2:25:f6:64:
                    08:00:6b:2f:a5:79:36:e3:f4:0d:ff:a5:8a:97:1b:
                    a8:57:ed:59:ec:ae:3e:12:66:23:b2:a8:9e:10:00:
                    d6:30:db:b4:33:c5:90:43:d7:be:99:57:34:96:1c:
                    34:d8:ff:35:3c:4c:ee:41:63:b8:37:e2:b1:4c:35:
                    89:81:49:56:44:ef:b1:ba:b8:28:a5:bf:e6:7e:9b:
                    fb:a0:53:17:09:5b:44:50:dc:59:3f:9f:5a:71:69:
                    49:6a:a3:58:76:1c:a0:32:50:f4:67:d9:6c:d8:7d:
                    4c:92:bd:24:0f:0b:21:98:8e:69:69:a0:f8:bc:bd:
                    67:d6:2a:d1:9b:d6:dc:7f:aa:fd:53:23:c0:99:e5:
                    ce:2f:33:d1:86:f5:02:06:a8:4a:02:8b:21:7a:01:
                    3e:b5:bd:92:64:3d:84:c1:04:81:e9:f7:d4:46:a8:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D3:1A:94:C0:7F:6C:29:99:79:66:17:3B:02:3C:A8:EB:04:31:72
            X509v3 Authority Key Identifier:
                keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e1:18:22:d1:65:66:2a:9e:ab:77:01:b0:39:ff:a7:37:7c:
         eb:0b:80:c3:ef:66:db:1b:b8:6c:36:47:ec:a4:88:d8:22:1c:
         17:cf:62:75:f1:84:9c:ef:ec:0d:36:28:7a:63:26:9e:11:95:
         b6:85:d8:82:7e:c2:56:31:fa:8a:2e:fc:44:c4:1c:12:31:c4:
         b6:16:1d:d2:55:63:19:cc:8b:83:a2:99:ef:3b:d8:e6:2f:5d:
         a9:3f:ca:05:c5:0c:6b:5a:cf:c8:72:aa:98:5b:e0:8b:71:88:
         ed:42:5c:bc:45:b4:93:3a:c6:c8:e4:33:28:c8:a0:1d:a8:27:
         b0:65:47:c4:5d:34:ab:90:b9:aa:c2:54:46:18:0d:66:5b:82:
         f8:65:f4:47:48:64:45:4c:56:3d:de:3e:91:1c:1b:68:94:19:
         c4:3a:78:c1:10:a6:24:2c:1b:b4:83:cd:da:8d:60:2c:55:0a:
         35:9a:3a:43:9d:cd:e5:5b:f3:5f:8b:5f:ce:6d:b7:ca:ea:06:
         ba:e8:24:83:cb:57:63:76:8a:77:97:3c:9e:74:6b:12:9e:08:
         69:c6:97:23:0e:ef:70:61:58:8e:73:01:ca:e1:f0:83:83:63:
         70:d7:54:4a:39:58:13:14:eb:c9:d9:2b:13:93:2f:64:52:b6:
         98:05:88:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----